Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/DsZCbvPYcYk5O1hLycw0RuaOhRg.roa
File: DsZCbvPYcYk5O1hLycw0RuaOhRg.roa (raw, json)
Hash identifier: 9OIuO2bjeqGbyMRusFFBSnwSwJ3MGtqSJmDHt3ZwuJ8=
Subject key identifier: 0E:C6:42:6E:F3:D8:71:89:39:3B:58:4B:C9:CC:34:46:E6:8E:85:18
Certificate issuer: /CN=7485bd93bbaae9d7c973ab386872f1148bb258d1
Certificate serial: 029E38F6
Authority key identifier: 74:85:BD:93:BB:AA:E9:D7:C9:73:AB:38:68:72:F1:14:8B:B2:58:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIW9k7uq6dfJc6s4aHLxFIuyWNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/DsZCbvPYcYk5O1hLycw0RuaOhRg.roa
Signing time: Sat 01 Jan 2022 00:57:23 +0000
ROA not before: Sat 01 Jan 2022 00:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212655
IP address blocks: 45.92.44.0/22 maxlen: 24
2a0e:1d40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43923702 (0x29e38f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7485bd93bbaae9d7c973ab386872f1148bb258d1
Validity
Not Before: Jan 1 00:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ec6426ef3d87189393b584bc9cc3446e68e8518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:46:e4:62:76:72:30:80:e7:09:d2:44:99:2f:
0a:2d:74:44:2d:1f:8f:f7:84:34:18:29:c6:39:dc:
76:b2:6d:8e:56:11:5e:ea:7b:eb:b0:34:8d:f9:b2:
10:ea:e0:fd:a2:84:2f:d3:18:b3:0d:31:93:6e:7e:
13:71:0d:82:56:47:c6:47:a9:07:95:96:40:83:24:
86:13:32:a1:e5:cc:ae:59:be:7b:a4:0b:e1:2f:2b:
9c:57:ca:ac:2c:90:65:36:4c:8a:e3:63:f4:a2:65:
f3:ff:8d:21:c2:7a:52:99:d0:ea:05:c2:6a:29:c5:
37:de:47:58:dd:df:54:40:04:13:30:01:9b:be:dc:
76:cb:a9:81:c9:ad:85:d2:75:06:4a:bc:8e:d1:db:
fe:95:75:3a:47:fe:b8:8b:20:8d:02:1f:b5:e7:4d:
96:93:ff:22:ce:25:ed:42:c0:a3:48:12:00:4d:46:
61:9b:4d:f7:b9:a8:e3:1a:8e:a9:4e:44:b0:9e:45:
61:bc:69:ab:dd:dd:87:43:08:2d:8e:be:f4:81:e5:
2c:ca:59:2e:d2:75:f9:58:cd:a6:6b:23:91:1b:99:
fe:0d:4b:25:6a:2a:80:73:d5:ac:4c:21:59:9f:7f:
3b:71:76:53:ef:89:fc:f5:6d:10:ce:05:75:39:ab:
7c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C6:42:6E:F3:D8:71:89:39:3B:58:4B:C9:CC:34:46:E6:8E:85:18
X509v3 Authority Key Identifier:
keyid:74:85:BD:93:BB:AA:E9:D7:C9:73:AB:38:68:72:F1:14:8B:B2:58:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIW9k7uq6dfJc6s4aHLxFIuyWNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/DsZCbvPYcYk5O1hLycw0RuaOhRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c2ef-e0ee-4dcf-9dd5-9c7fdbdad0db/1/dIW9k7uq6dfJc6s4aHLxFIuyWNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.44.0/22
IPv6:
2a0e:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
16:84:9b:ba:c8:7f:b3:26:d8:6e:7d:f3:c0:e9:a6:43:a9:a0:
e2:51:7e:bf:d6:4a:1b:28:26:95:2a:0a:ed:3f:95:6d:00:39:
09:56:b9:3f:e7:25:88:83:22:4e:19:a1:d9:0a:1d:cc:26:23:
56:96:4f:96:c8:c2:3e:0d:7a:bf:c1:88:d9:21:8c:a2:3a:79:
4e:f2:2c:ec:4a:18:cf:39:71:67:f2:ba:a3:14:c8:ef:ab:8c:
c4:bf:4d:ad:f6:a0:c2:b0:65:02:7d:ad:df:cd:e1:89:8b:cb:
dd:90:cd:28:e5:36:81:ea:71:5e:54:e1:52:80:e7:7a:7b:4a:
93:22:4a:59:e6:7e:6b:69:58:f6:15:d5:2f:70:d8:1d:0d:a5:
31:23:0b:34:4c:11:1a:34:44:cd:cf:b9:13:ed:c6:4c:7c:64:
ff:96:8d:47:a7:2f:35:93:e4:e9:07:dc:18:c8:5e:86:21:08:
47:14:e0:b0:0a:f4:a9:2d:27:d9:9e:b0:35:9d:63:37:d6:ec:
96:2e:b3:f9:b1:6d:ef:7e:9e:42:d6:75:7f:4c:65:23:da:76:
5f:04:f8:78:c4:0c:65:c4:56:1b:0a:a6:bc:4b:30:d4:50:47:
ad:48:5d:33:89:ee:4a:85:a2:ab:46:da:aa:75:05:13:30:63:
90:07:3a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:21 2025 by rpki-client